Cisco SG500-28 Administration Guide

Security
Denial of Service Prevention
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3 408
20
STEP 1 Click Security > Denial of Service Prevention > Security Suite Settings. The
Security Suite Settings displays.
CPU Protection Mechanism: Enabled indicates that SCT is enabled.
STEP 2 Click Details beside CPU Utilization to go to the CPU Utilization page and view
CPU resource utilization information.
STEP 3 Click Edit beside TCP SYN Protection to go to the SYN Protection page and
enable this feature.
STEP 4 Select DoS Prevention to enable the feature.
• Disable—Disable the feature.
• System-Level Prevention—Enable that part of the feature that prevents
attacks from Stacheldraht Distribution, Invasor Trojan, and Back Orifice
Trojan.
STEP 5 If System-Level Prevention or System-Level and Interface-Level Prevention is
selected, enable one or more of the following DoS Prevention options:
• Stacheldraht Distribution—Discards TCP packets with source TCP port
equal to 16660.
• Invasor Trojan—Discards TCP packets with destination TCP port equal to
2140 and source TCP port equal to 1024.
• Back Orifice Trojan—Discards UDP packets with destination UDP port
equal to 31337 and source UDP port equal to 1024.
STEP 6 Click Apply. The Denial of Service prevention Security Suite settings are written to
the Running Configuration file.
• If Interface-Level Prevention is selected, click the appropriate Edit button to
configure the desired prevention.

Cisco SG500-28 Specifications

General

Ports	28
Port Type	Gigabit Ethernet
Layer	Layer 3
Switching Capacity	56 Gbps
PoE Support	No
Form Factor	Rack-mountable
RAM	256 MB
Flash Memory	32 MB
Power Supply	Internal
Jumbo Frame Support	9KB
VLAN Support	Yes
Operating Temperature	32°F to 113°F (0°C to 45°C)
Operating Humidity	10% to 90% non-condensing
Dimensions	17.3 x 10.2 x 1.7 in (440 x 260 x 44 mm)
MAC Address Table Size	16, 000 entries